Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
File:                     UyQGWmE9LRB4F5xiFjcczGp3UHo.mft (raw, json)
Hash identifier:          8AtydyOlUPW+/aqeIFWKCFpY7ffr8pBX6lG+HzSIXMA=
Subject key identifier:   43:53:61:87:CB:95:F9:F9:9B:01:BD:20:34:9D:F6:ED:FB:49:54:27
Authority key identifier: 53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A
Certificate issuer:       /CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
Manifest number:          0188
Signing time:             Fri 17 Apr 2026 04:11:52 +0000
Manifest this update:     Fri 17 Apr 2026 04:11:52 +0000
Manifest next update:     Fri 24 Apr 2026 04:11:52 +0000
Files and hashes:         1: UyQGWmE9LRB4F5xiFjcczGp3UHo.crl (hash: VfZ9OK1MAzE5KqQXC5vzoqw5YxKyAgNvpzt4LXPbkHI=)
                          2: 2805F2D6E5B511EEB34EF35AC4F9AE02.roa (hash: xQmsVP4QLFQ4i3YXyMm0tpulZSIAm9nn/IhZaNrB5cU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl
                          rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158EC4, serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
        Validity
            Not Before: Apr 17 04:11:52 2026 GMT
            Not After : Apr 24 04:11:52 2026 GMT
        Subject: CN=69e1b308-c974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e1:55:0d:5d:7a:19:91:c4:3f:2b:02:a7:59:
                    f0:c6:ce:35:00:46:15:7d:05:31:50:0d:bd:ed:63:
                    b7:9a:bf:e8:bb:b9:76:55:20:7e:b7:87:77:14:7d:
                    a0:a0:d3:55:7d:79:9b:66:0a:98:d2:44:c8:31:01:
                    4a:94:79:36:90:c8:d4:ab:62:00:11:eb:ed:08:6f:
                    5c:75:e3:18:0d:a4:92:8c:79:91:eb:2d:3c:30:17:
                    5d:c9:25:a7:0b:89:6a:d8:1b:08:f7:0a:d5:1d:63:
                    97:9d:ec:9d:5a:21:f0:40:b0:2a:46:40:75:5e:c2:
                    60:98:18:c6:ac:a5:21:83:9a:98:ce:f1:78:5c:5c:
                    0d:65:11:7c:4b:74:e0:96:24:39:4e:aa:44:97:ab:
                    b1:ac:c8:b2:f8:60:08:7b:d4:15:ef:94:cd:8a:fe:
                    6c:fa:ba:ce:bf:c5:7f:29:06:08:71:00:7d:2a:81:
                    6f:12:4d:ca:c2:34:e7:65:00:d8:2d:f2:5e:15:b3:
                    c3:c7:88:a2:33:71:6b:0c:45:83:5d:27:fd:98:79:
                    c8:13:3b:bb:8d:28:11:22:4f:66:4b:a7:13:d2:94:
                    52:4c:ff:ee:5a:7d:ac:ec:14:67:d7:fb:25:e2:62:
                    aa:eb:48:85:a0:4d:e2:56:31:96:7c:b1:61:c8:93:
                    e6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:53:61:87:CB:95:F9:F9:9B:01:BD:20:34:9D:F6:ED:FB:49:54:27
            X509v3 Authority Key Identifier:
                keyid:53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:90:8a:04:45:02:88:62:bf:e1:be:3e:87:d6:53:cd:4e:00:
         21:79:a0:a4:3c:5b:89:40:61:7c:40:0b:cb:22:f3:b6:26:09:
         e0:3f:79:49:fc:67:de:52:cf:e3:00:4e:d0:59:e7:6b:aa:89:
         0c:d9:10:ed:e6:8c:67:64:32:d6:33:5f:05:c7:60:b3:26:af:
         78:25:a6:cb:85:d2:2e:50:27:70:c6:31:ac:3b:a1:a3:ce:a6:
         98:e5:fd:5a:50:6e:72:fa:67:21:26:4a:a8:e2:2d:89:3f:6f:
         77:7d:5d:e7:08:93:38:28:2f:41:6d:1a:37:40:79:4c:18:f9:
         04:49:7b:42:ea:c6:31:a1:39:85:6b:a7:57:f4:a7:f4:c6:41:
         19:1a:47:46:de:14:06:4b:01:30:92:b7:1d:52:ca:2b:dc:47:
         93:cd:66:81:e7:10:22:4a:28:72:1a:36:aa:7b:f2:88:91:31:
         78:80:af:b7:f2:6a:d4:b2:ba:1a:d5:ff:67:d6:5f:72:42:dd:
         0f:f5:54:85:12:bc:df:b3:89:d9:ce:66:0f:43:d7:b4:6c:cb:
         8c:d2:27:7e:e2:dd:26:6e:16:fb:b8:2d:87:64:cb:ab:a0:aa:
         bc:90:09:b5:24:5e:c7:f3:09:31:93:9e:aa:1f:25:d5:79:b4:
         1b:3a:49:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:00 2026 by rpki-client